Ferry Haris

An introvert founder. Bootstrapping cybersecurity and privacy compliance products:

[Ferry Haris @FeHa]

Ternyata banyak orang tua murid di Belanda sudah mulai mengajarkan Linux kepada anak-anaknya.

Belum lagi soal sovereignty.

Emang beda ya kalau negara sudah gak mikirin internet cepat untuk apa...

https://t.co/pRkpWrJ2sG

[Ferry Haris @FeHa]

Good looking Trust Page you have here.

Few follow-up questions, maybe suggestions:
1. Are you planning to get ISO 27001 or SOC 2 yourself? Depends on who your target is, this question might come sooner than you might expected.

2. Since you said you are GDPR compliant, I cannot see the sub-processors list.

3. Perhaps completing CSA CAIQ yourself and upload it there also helps potential customers to already review what you have and what you don't have.

[Ferry Haris @FeHa]

Apparently LinkedIn users already start using it to scout illegal service these days.

[Ferry Haris @FeHa]

The past days we are busy mapping some evidence to ISO 27001 and SOC 2 controls for 2 startups, so they can focus on building their products and serve customers.

At https://t.co/4HXsQ55IPd, for companies <50 employees, we bundle software + consultant + internal audit + (optional) pentest.

Why? Because we know these companies don't have time to work on compliance and yet they still want to do things right. So, we help them from A-Z.

Do you think your small business can benefit from such bundled service as well? Hit me up!

[Ferry Haris @FeHa]

@nomad_ryusei Welcome to Netherlands. Hope you have many many more great experience while here

[Ferry Haris @FeHa]

@twenty4_io Not just happening in your country, it's everywhere.

That's why at https://t.co/rRpLftQrfg we offer all-in support for small companies because expecting them to do the right thing sadly will never happen.

[Ferry Haris @FeHa]

The trial period of what Summer can be in Amsterdam has ended

[Ferry Haris @FeHa]

In my experience working with small businesses, mid-size companies, and enterprises, having beautifully written and formatted documents (policy, procedure, etc.) means nothing when

❌People don't read them
❌People don't understand them
❌And the worst part is people don't do them

And the sad part is this happens in all sort of "mature" regulated companies and certifiable companies, whether ISO 27001 or SOC 2.

Time and time again the reality has proven that all certificates in the world don't really mean what they are supposedly mean. ISO 27001 / SOC 2 doesn't mean the companies are secured.

If that's the reality we live in, then why we keep pushing the process around certificates, audits, etc. when actually it means nothing?

Just me babbling to myself while waiting for my daughter practice her musical performance.

[Ferry Haris @FeHa]

@StevBuilds @3rdcomply No idea.

We keep knocking on doors.

[Ferry Haris @FeHa]

Our AI service suddenly stopped because @GeminiApp cannot be used due to rate limit.

Now for emergency, we had to create a new billing account and use their prepaid method.

Definitely it's a strong signal to diversify the LLM models we use; because our IP is in the context engine, not the LLM.

Would love to try @claudeai but not sure if the charges would be high.

Unfortunately most startup support only applied to those with VC funding, not fully bootstrapped business like us.

Do you have other suggestion for us to diversified our LLM usage?

[Ferry Haris @FeHa]

@MrOngDedy Ya tipis2 lah kalau bisa 🤣🤣🤣

[Ferry Haris @FeHa]

@romanbuildsaas Will keep this in mind

[Ferry Haris @FeHa]

@mitsuhiko Have you tried Heylogin?

[Ferry Haris @FeHa]

Building tech company is hard.

If I need to go back doing service or consulting, then so be it.

Better be like that than being stubborn and burnt out.

Build in Public can be building business in general, not specific to tech, right?

[Ferry Haris @FeHa]

@dam_mp Nah kalau global tech company or quant firms yang dimaksud itu kira2 peduli gak ijasah lulusan mana, or sebenarnya mereka lebih care dengan your skills and expertise?

[Ferry Haris @FeHa]

@TTrimoreau Audit

https://t.co/z3MsQNovgI

[Ferry Haris @FeHa]

@naturedotcom Remote audit?